Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
File:                     wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft (raw, json)
Hash identifier:          ANkLRKfs6sBhl+/M0qX6aAGBBimPKHWraeNdDaUihXA=
Subject key identifier:   33:30:0C:B3:B9:2F:09:14:B1:04:FF:6B:B9:87:68:4F:8C:AB:EA:80
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Certificate issuer:       /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial:       01A0F00BEB166930808BCC4CBE541C1313D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
Manifest number:          0F3F
Signing time:             Wed 30 Sep 2026 02:01:47 +0000
Manifest this update:     Wed 30 Sep 2026 02:01:47 +0000
Manifest next update:     Thu 01 Oct 2026 02:01:47 +0000
Files and hashes:         1: 6mjN2cFeWfG3wVcYw8P1dVWShro.roa (hash: oi7Y1F+Y4ggk+eXgRwxuyy3TiFb/d2QmgXSyELcF0f8=)
                          2: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl (hash: Ptt5c3BHzzA4jeEmvU4qiltRn0nVQyEV4bzZ5vnPvEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:0b:eb:16:69:30:80:8b:cc:4c:be:54:1c:13:13:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
        Validity
            Not Before: Sep 30 02:01:47 2026 GMT
            Not After : Oct  1 02:01:47 2026 GMT
        Subject: CN=33300cb3b92f0914b104ff6bb987684f8cabea80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:99:5f:92:60:65:2b:ef:16:03:b8:d0:37:
                    59:61:e9:d5:0f:6f:b3:97:cf:f6:08:fd:ff:6b:db:
                    25:e8:7e:2e:1e:56:48:9e:e1:bc:89:6d:44:ac:56:
                    db:38:5d:bb:3f:82:ca:4f:f4:80:e3:35:9e:f7:2c:
                    c1:e9:52:ac:6d:ff:0a:cd:72:3a:c4:fb:40:73:8b:
                    54:49:e2:71:ae:bc:46:98:e4:2a:0b:ef:f4:a7:12:
                    89:fb:c3:22:26:ee:79:81:72:5c:35:cc:99:c0:c9:
                    c7:a9:bc:23:e5:2c:87:0c:38:b5:9a:30:06:b3:8d:
                    c8:e5:ef:02:fd:fd:ce:c6:f2:6a:6a:c8:91:f6:a2:
                    42:99:26:f5:7f:9d:c3:3e:80:c3:ec:b7:04:0f:32:
                    d7:7b:1e:31:78:68:9b:63:dd:ba:ec:cb:0e:bf:d0:
                    b2:fc:98:a2:b2:5c:b0:ab:73:67:da:41:eb:c8:05:
                    ce:a5:67:fa:cf:f4:04:d8:c8:91:6f:f9:aa:f7:f9:
                    0e:46:8d:57:54:ee:f1:5a:8a:ff:eb:d5:12:8b:75:
                    28:77:a3:87:11:20:37:b7:06:df:4a:23:58:c7:9a:
                    20:d4:6d:53:c1:66:b9:ee:27:ae:80:4b:2d:86:33:
                    17:ae:a5:5e:99:57:3f:1b:8e:f1:a0:96:d3:eb:b0:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:30:0C:B3:B9:2F:09:14:B1:04:FF:6B:B9:87:68:4F:8C:AB:EA:80
            X509v3 Authority Key Identifier:
                keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:cf:18:35:83:35:0f:a3:5a:1f:4a:cb:af:d3:40:83:64:87:
         38:60:4f:62:cb:f3:b8:99:08:64:be:86:80:9b:d1:5b:11:50:
         67:f2:24:b8:b9:3a:00:20:69:ad:6d:aa:67:a4:bf:07:44:b9:
         63:31:5d:d2:c8:60:64:35:c7:eb:c5:a9:d5:48:1b:eb:83:32:
         1a:36:24:fc:f0:4b:55:5f:12:61:6c:13:87:85:5d:f2:28:ce:
         00:81:1c:bb:73:c1:11:1c:14:30:e4:1d:ae:7b:74:c2:a2:0b:
         95:59:46:e8:65:ae:53:e1:d3:52:de:42:6b:91:c4:37:4c:46:
         72:c6:03:56:a5:63:c5:76:5d:01:9d:66:f8:55:fd:12:ee:04:
         1d:e9:c8:ed:29:41:59:6b:07:b4:55:f0:36:4d:c2:dd:16:b3:
         9d:08:75:c7:26:a9:35:a0:2c:0f:db:98:4c:20:f1:9e:f6:c2:
         a1:a4:54:29:9d:99:a1:3c:0f:16:f6:85:91:6c:7d:ff:a4:61:
         7a:c8:8f:14:da:20:85:12:58:00:74:79:b4:61:e2:19:89:4d:
         03:05:e5:9b:a6:eb:83:2f:a3:68:af:c2:70:b2:b9:b2:37:67:
         69:5a:83:92:d6:f6:f2:6c:7b:ee:9e:91:d1:d6:b1:4b:22:9d:
         7e:f0:48:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:06:00 2026 by rpki-client